Find what's exposed before it's exploited.
Search hosts, services and banners across the public internet. Write a query, drop it in the queue, and get clean, structured results you can work with right away.
| Host | Port | Product | Country | Server |
|---|---|---|---|---|
| 192.0.2.14 | 3000 | Grafana | DE | nginx |
| 198.51.100.72 | 3000 | Grafana | US | — |
| 203.0.113.9 | 3000 | Grafana | TR | Caddy |
| 192.0.2.201 | 3000 | Grafana | NL | Apache |
Built for recon that has to be repeatable
A focused toolset for mapping attack surface, with no dashboards you'll never open.
Field operators
Target product, port, country, title or server banner with a compact query language you can learn in a minute.
Fair queue
Every search is queued and delivered in order, so heavy periods never drop or corrupt your results.
Structured results
Host, IP, port, protocol, title, product, country and server in one clean table. Export it as CSV.
Pay per result
Credits are reserved per search at a flat $1 per 1,000 results. You only pay for what you pull.
Live status
Watch your position in the queue and the scan progress update in real time, with no manual refresh.
API token
Every account gets a personal API token on the dashboard, ready for scripting your own workflows.
From query to intelligence in three steps
Write a query
Combine field operators to target products, ports, countries or banners across the whole index.
Queue the scan
Searches run through a fair queue with a strict 15s cooldown, so results stay accurate and accounts stay healthy.
Read the results
Get host, port, service, product and banner data in a table you can sort through, copy, or export.
Say exactly what you're looking for
Chain fields with AND to narrow results. Wrap values in quotes.
appApplication or frameworkapp="nginx"productDetected product nameproduct="Grafana"portOpen service portport="443"countryTwo-letter country codecountry="TR"titleHTML page titletitle="admin"serverHTTP server bannerserver="Microsoft-IIS"Simple, flat pricing
$1 per 1,000 results. Pay only for what you pull, with no subscription.
Starter
Perfect for triage and one-off lookups.
- 1,000 result credits
- $1.00 per 1,000 results
- Priority queue access
Pro
Built for recurring reconnaissance.
- 10,000 result credits
- $1.00 per 1,000 results
- Priority queue access
Enterprise
High-volume reconnaissance with dedicated throughput.
- Unlimited result credits
- API access & exports
- Dedicated queue lane
Questions, answered
What can I search for?
Hosts, services and banners across the indexed public internet, filtered by product, port, country, page title or server header.
Why is there a queue and a cooldown?
The data source allows one scan every 15 seconds. Searches are queued and served in order, so nothing is lost when it gets busy. You can watch your position live.
How do credits work?
Credits are reserved when you queue a search and settled when it completes. New accounts get 250 free results to try the platform. Top up with a Starter or Pro pack when you need more.
How do I get support?
Message us on Telegram at @BIBILZERODAY. Include your account email and, for deposits, your transaction hash.
Who is this for?
Security researchers, red and blue teams, and defenders mapping their own attack surface. Use it only against systems you own or are authorized to assess.
Start mapping your attack surface
Create an account and run your first search with 250 free results.
Get started free